Questions tagged [deny]
76 questions
3
votes
2 answers
nginx deny user agent causes error when not encapsulated in quotes
I'm trying to deny some user agents I constantly see probing my nginx web server.
If I have this in my .conf file
## Block http user agent - morpheus fucking scanner ##
if ($http_user_agent ~* (morfeus fucking scanner|ZmEu)) {
return…
ProfessionalAmateur
- 937
- 6
- 17
- 27
3
votes
1 answer
IIS 7 - Enabling deny url sequences with backslash
I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using:
Duane
- 131
- 1
- 3
3
votes
1 answer
Deny all gets overridden by another location block
location /_private {
deny all;
}
location ~ \.php$ {
# Workaround PHP vulnerability:
# http://forum.nginx.org/read.php?2,88845,page=3
try_files $uri =404;
include /etc/nginx/fastcgi_params;
keepalive_timeout 0;
…
user39618
3
votes
5 answers
How do I deny a user-based Group Policy for a specific computer?
So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that numerous users login to which need to NOT inherit…
Matthew Flook
- 171
- 2
- 2
- 7
2
votes
0 answers
Disable FTP commands on a per-user basis
I'm in the process of configuring an FTP server, using vsftp. I wish to have a couple different users. Some of these should only be able to read files, others should only be able to put files and some of these should also be able to create…
Giacomo Alzetta
- 411
- 3
- 5
2
votes
3 answers
Debian - how to prevent global read access for all files?
In my debian all files, even the system ones have permissions rw-r--r--, so it means that all users can view ANY file even some system configuration or database files and so on.
How do I prevent users from reading all system files ? Is there any way…
Welite
- 29
- 3
- 8
2
votes
1 answer
How to deny requests in nginx when there is no referer?
In nginx access.log I see many lines like:
1.2.3.4 - - [19/Oct/2014:22:48:11 -0400] "POST /someurl/suburl HTTP/1.1" 200 19967 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2"
Where only common thing…
Jand
- 213
- 1
- 4
- 7
2
votes
1 answer
How can I deny access to a folder in OpenLiteSpeed similarly to the way Apache does it?
I'm trying to deny access to a folder for a website that is hosted with OpenLiteSpeed v1.4.2, but I'm have trouble. I take it that .htaccess isn't supported in OpenLiteSpeed so I am unable to just put a .htaccess file with Deny From All in it in the…
SameOldNick
- 586
- 7
- 23
2
votes
2 answers
apache2: Require valid-user AND allow all
I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users.
So first try the basic authentication, if that fails,…
Roland684
- 21
- 1
- 2
2
votes
1 answer
Apache LimitExcept returning Error 400 on permitted method
I have the following directive in my Apache httpd.conf:
deny from all
OPTIONS and PROPFIND work as expected, but REPORT returns 400: Bad Request. Remove the LimitExcept alltogether and…
Mark Henderson
- 68,823
- 31
- 180
- 259
1
vote
1 answer
SQL Server 2005 - Deny DROP TRIGGER permissions
We have a custom trigger on a 3rd party app table to help us audit changes. Occasionally that trigger is removed. Looking thru the traces it shows that the 3rd party app is dropping it (for no good reason). The Vendor acknowledges it does this "from…
Matt Rogish
- 1,512
- 6
- 25
- 41
1
vote
1 answer
Drop packets with iptables for ssh login by user root
Is it possible to have iptables DROP any packets with user "root" so that the SSH daemon doesn't even have to waste cycles denying the login attempt?
I already deny root login attempts in my ssh_config. But that still takes up resources to deny and…
J Roysdon
- 141
- 4
1
vote
1 answer
Lock access to error_log from url
I have a website on WordPress.
Versions:
WordPress 3.3.1
PHP 7.2.13
Apache 2.4.37
My problem is that, error_log file is exposed to be viewed from url.
For example:
www.example.com/wp-content/themes/MyThemeName/error_log
Can you please help me…
nika
- 11
- 1
1
vote
0 answers
why selinux is denying file access(ls /usr/bin) to container_file_t type inside my container
I have one RHEL7.4 node, that when enforing selinux, it will fail my container, I checked and found it is denying reading in the container internal directories:
# docker run -it 172.16.1.120:5000/fluentd:0.14 ls /usr/bin
ls: cannot open directory…
Michael.Sun
- 111
- 4
1
vote
1 answer
Deny exim4 to receive all emails
I have a fresh exim4 install without any tweaks on a Debian 8.6 machine.
I use it to send emails from PHP:
; /etc/php5/fpm/conf.d/mail.ini
[mail function]
sendmail_path = /usr/sbin/exim4 -t
mail.add_x_header = On
mail.log = syslog
Recently we…
Sasha MaximAL
- 115
- 4